Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
File: OBgMB0--WYgkxwAxlbMKpKNmFSw.mft (raw, json)
Hash identifier: 9MiPUIgATVFTZusFtxjpy1SLlx2qU6xUx3wrl/WgcFM=
Subject key identifier: 51:AC:49:0B:70:97:70:48:BE:15:0D:18:42:5F:25:B7:6C:CA:53:77
Authority key identifier: 38:18:0C:07:4F:BE:59:88:24:C7:00:31:95:B3:0A:A4:A3:66:15:2C
Certificate issuer: /CN=38180c074fbe598824c7003195b30aa4a366152c
Certificate serial: 0194BBCDFA9C0F2BACCAD8E2C42A93401105
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
Manifest number: 10CA
Signing time: Fri 31 Jan 2025 10:00:25 +0000
Manifest this update: Fri 31 Jan 2025 10:00:25 +0000
Manifest next update: Sat 01 Feb 2025 10:00:25 +0000
Files and hashes: 1: OBgMB0--WYgkxwAxlbMKpKNmFSw.crl (hash: ZK7CpKRZ2VTdZ/Avgn42PMKG7hZ1GoIn8emqYWo9g+A=)
2: RgnQQrRta7gI5tMEs8KYLDUw56A.roa (hash: BgqUN0fwjyUmpN6+mMGR9pZDz7pjjDqgWhnYghe6PvM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:fa:9c:0f:2b:ac:ca:d8:e2:c4:2a:93:40:11:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38180c074fbe598824c7003195b30aa4a366152c
Validity
Not Before: Jan 31 10:00:25 2025 GMT
Not After : Feb 1 10:00:25 2025 GMT
Subject: CN=51ac490b70977048be150d18425f25b76cca5377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:43:50:8d:d7:16:94:01:c8:5c:9d:05:56:9c:
ed:a6:83:83:cc:b0:54:21:a5:19:12:e9:10:f5:14:
bc:77:bb:34:84:13:69:c2:ea:06:98:f4:3f:ba:40:
09:bd:8c:c3:ec:e8:07:76:a1:ca:fe:4e:7f:e1:c7:
1c:32:0b:e7:b1:47:1a:75:0e:99:ea:df:43:bb:8f:
71:dd:b7:50:8d:c9:06:e8:94:b2:85:31:43:9d:67:
99:1e:8a:b9:39:02:78:f0:b7:fb:4a:e2:6d:fa:12:
6f:0d:ea:e8:ef:2a:bc:2b:f0:09:3a:30:2b:47:a0:
a2:7d:7e:9f:5e:c7:81:e7:10:a2:41:26:ae:d1:cf:
b4:92:38:f7:39:ac:8d:a4:06:c7:f4:cb:b4:1a:81:
b4:9d:13:0c:99:b2:a6:31:ad:92:b6:47:e8:d9:3f:
19:19:83:a3:c9:f6:c0:75:60:6b:e1:67:3e:70:28:
0b:e5:02:5a:04:7f:cd:49:c3:8d:fc:37:81:42:30:
ee:18:10:3b:c1:b0:3c:b2:d6:f0:f0:c2:27:4b:82:
9b:ab:43:81:56:cb:5a:12:27:04:ed:f3:66:c9:8e:
74:7a:16:ca:9f:23:2b:13:b9:eb:27:e5:95:33:de:
1d:77:47:8d:01:57:42:72:1c:37:65:5d:24:cc:5a:
d5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:AC:49:0B:70:97:70:48:BE:15:0D:18:42:5F:25:B7:6C:CA:53:77
X509v3 Authority Key Identifier:
keyid:38:18:0C:07:4F:BE:59:88:24:C7:00:31:95:B3:0A:A4:A3:66:15:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:c4:67:01:0f:a2:fd:08:30:4e:a2:a6:f9:b1:e1:68:38:82:
16:0c:a1:5e:f3:aa:5d:bb:3a:5d:32:8e:46:a5:8f:d3:e0:2a:
11:ae:fe:7e:6e:c0:60:d1:d9:6b:13:ae:16:73:d2:d5:e0:0e:
27:4c:16:5a:49:7b:d5:2c:9d:43:cd:8a:a6:77:46:c1:ef:43:
05:de:53:ac:37:36:9b:c2:2b:24:22:2b:a2:4d:0d:9e:d2:3f:
8c:d5:d5:75:87:52:1c:aa:64:56:69:48:91:13:9d:44:cf:2e:
ca:df:c3:4d:e5:fa:62:6b:f8:50:ac:cc:7a:9a:03:99:47:ad:
9e:af:f1:d0:dd:30:9f:15:d4:12:05:cb:35:d9:f5:e9:c0:e7:
15:8d:3a:8f:6f:dd:8a:e4:db:d2:db:77:b2:25:2f:b6:8b:f3:
0c:57:ca:65:bc:3c:b7:55:5b:d5:e3:fa:2e:d4:d0:6c:7e:a5:
aa:0d:1c:80:86:eb:69:c8:b3:3c:19:09:77:37:a7:14:fa:a6:
5f:4b:30:e4:fc:93:a2:c5:4e:da:4e:52:92:5c:d7:f8:98:35:
df:14:b5:d7:a2:d8:bd:ca:a0:a3:0e:2a:cd:43:a1:93:1b:04:
f8:89:27:c9:58:06:4e:49:47:7d:a6:bf:8a:84:54:4a:d1:f1:
90:99:39:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:54:44 2025 by rpki-client